Thursday, November 27, 2014

DirSync tool - Quickview

This is my self notes on preparing for the Office 365 exam 70- 346 from various sources including MSDN, Office 365 community forum , online video tutorial.

DirSync tool lets the Active Directory domain admin to synchronize the users from on-premise to Cloud (Azure AD) for consuming the Microsoft Online Services such as Office 365,Intune,Desktop office installation [Complete],Exchange and Lync Online .

This tool can be installed on any server which is joined to Active Directory and can be part of AD forest.

Using this tool you can sync the contacts,groups and mail enabled objects from AD to Azure AD

The recently, this tool has been improved to sync [one way push ] the password hash [read it as not password ] from AD to Azure AD.When you sync the password , Office 365 disable the change password option for users in the admin site and user password can be reset only on on-premise AD.

[This feature will be highly recommended when your on-premise AD FS server or services not consistent player.]
If there is an outage in the Single Sign-On (AD FS 2.0 ) on your on premise, you cannot use the Office 365 services ]
This approach also considered as backup for AD FS infrastructure.

By default a tenant [One subscription] and Azure AD can hold up to 50,000 objects and it can be increased up to 300,000 objects when you verify your domain.

DirSync tool by default comes with SQL Server Express 2012 SP1 that can process up to 50,000 and if your AD has more than this limit, then this tool must be installed to use the SQL Server standard edition with one dedicated instance.

It will create a service account on your local computer which is joined to active directory,that account will have high privilege permission on AD and all the AD Forest read all domains and write back to Azure AD.

This tool can sync the user objects for every 3 hours by default,you can change this interval as per your own policies.